Our handling of your data and your rights. Information on the collection of personal data according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
1. Who is responsible for data protection, and whom can I contact?
Responsible according to Article 4, Paragraph 7 of the GDPR:
- Steinbeis Holding GmbH, Joseph-Wild-Str.13, 81829 Munich, Germany
- Tel.: +49 89 5161777 0
- Email: info(at)st-holding.de
Steinbeis Holding GmbH is legally obligated to appoint a data protection officer.
2. What sources and data do we use?
We process personal data which we have received from you within the scope of employment and over the course of the existing employment relationship. We received this data directly from you during the employment process. Moreover, we process data which are required for the handling of safe business operations between our company and our suppliers and customers.
The following data is generally processed:
- Basic contractual and payment data
- Planning data
- Time code data
- IT use data
If you are employed as a case handler, additional data regarding the operational assignment is processed.
3. For what purpose do we process your data, and on what legal basis is this performed?
Some of your personal data is processed by Steinbeis Holding GmbH to perform a contract or pre-contractual measures with you. For this reason, only your name and business contact details are processed.
The legal basis for this is Article 6, Paragraph 1, b) of the GDPR.
The processing of your personal data for marketing purposes is based on your own consent according to Article 6, Paragraph 1, a) of the GDPR.
To make our production processes demonstrably safe, to prevent property damage and theft and to allow these to be documented in the event of damage, we operate a labelled video surveillance system. The legal basis for this is Article 6, Paragraph 1, f) of the GDPR.
Additional regulations for the safe handling or your personal data are included in our company agreements.
4. Who receives your data?
We do not share your data with unauthorised third parties without your knowledge. However, within the scope personnel management, proper business operations and for the communication and processing of business relationships with our suppliers and customers to the required extent, we or you share data with the following entities:
- Public offices (e.g. social security representatives)
- Financial institutes (wage and salary payments)
- Contractual partners as suppliers or for customer orders
- External contractors according to Article 28 of the GDPR
5. Are your data transferred to a third country or international organisations?
The transfer of your data to a third country or international organisations is not planned.
6. How long do we store your data?
Your personal data will be deleted after the legal retention periods expire, based on the regulations of the German Civil Code (BGB), the German Commercial Code (HGB) and the German Text Code (AO).
Insofar as data are not affected by these, they will be deleted when their intended purpose ceases to exist.
Video surveillance data are deleted after seven days.
7. What other data protection rights do you have?
You have the right of access to your personal data stored and processed by Steinbeis Holding GmbH (Article 15 of the GDPR), the right to rectification (Article 16 of the GDPR), the right to erasure (Article 17 of the GDPR) or the right to restriction of processing (Article 18, Paragraph 1, a) to b) of the GDPR), and the right to portability (Article 20 of the GDPR).
The right to lodge a complaint with the competent data protection supervisory authority exists at all times. To do so, please contact the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany; firstname.lastname@example.org.
8. What rights to objection do you have?
If you have consented to the processing of your data (Article 6, Paragraph 1, a) or Article 9, Paragraph 2, a) of the GDPR), you have the right to withdraw this consent at any time. Furthermore, you have the right to object to the processing of your personal data according to Article 21 of the GDPR.
If you provide legitimate grounds for objection, your personal data will basically no longer be processed for the respective purposes and deleted, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
For such issues, please contact Steinbeis Holding GmbH at the address provided above.